Skip to content

Commit 1448cb1

Browse files
rezmossrezmoss
authored
Merge pull request #32 from rezmoss/automation/sbom-benchmark-2026-08-02
report: SBOM compatibility benchmark 2026-08-02
2 parents d689448 + 2f1015e commit 1448cb1

5 files changed

Lines changed: 10202 additions & 70 deletions

File tree

‎reports/sbom/README.md‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@ These are maintainer-reviewed monthly snapshots from the [SBOM compatibility ben
88

99
| Date | Status | Fixtures / tool runs | Tool versions | Report | Data |
1010
|---|---|---:|---|---|---|
11+
| 2026-08-02 | PASSED | 3 / 12 | syft v1.50.0, trivy v0.72.0, cdxgen v12.8.2, microsoft-sbom-tool v4.1.5, cyclonedx-cli v0.33.1 | [report](history/2026-08-02.md) | [JSON](history/2026-08-02.json) |
1112
| 2026-07-16 | PASSED | 3 / 12 | syft v1.48.0, trivy v0.72.0, cdxgen v12.7.1, microsoft-sbom-tool v4.1.5, cyclonedx-cli v0.32.0 | [report](history/2026-07-16.md) | [JSON](history/2026-07-16.json) |
1213

1314
A passing snapshot means the configured commands completed, documents validated structurally, minimum inventory rules passed, and every configured identity was found. It is not a security certification, vulnerability assessment, license audit, or proof of complete component discovery.

0 commit comments

Comments
 (0)